Send a PDF for people to fill in and sign online, from your own server.
InvoiceShelf
Make invoices and quotes, track who has paid and log expenses for your small business.
Small business
AGPL-3.0-only
What it does
InvoiceShelf is invoicing software for freelancers and small businesses that you run yourself. Create quotes and invoices, turn them into tidy PDFs and email them to customers. Record payments, see who still owes you, log expenses and set up repeat invoices for regular work. Customers get their own page to see their invoices, and your business records stay on your own server.
- Quotes, invoices and receipts as polished PDFs, emailed in one click
- See at a glance who owes you and what is overdue
- Repeat invoices, expenses and simple reports
- A customer portal, several companies and team roles
Great for: Freelancers, tradespeople and small businesses who want proper invoices without a monthly subscription.
Tell my AI: make it mine
Try the demo
View on GitHub
Official public demo with sample data that resets automatically; it may run a newer version than the pinned 2.4.7. Don't enter real customer details.
- LicenceAGPL-3.0-only
- Where it runsOnline (about $5/month, usage-based) · Your computer (free)
- Built withphp, typescript, vue
- Your dataStays in your own copy
- SourceInvoiceShelf/InvoiceShelf
Ways to use it
Choose one when you tell your AI. It sets everything up with you, in plain words.
- Online with Railway about $5/month, usage-basedA general-purpose host that can run any of these apps, including your own customised version. Usage-based pricing with a free trial. Third-party host.
- On my own computerFreeYour AI installs what it needs and explains each step. It works while your computer is on.
Hosts are independent companies, not BespokeAI. You sign up and pay them directly. We may earn a referral fee, which never changes your price.
How people are using this project
Examples of what people ask their AI to do with InvoiceShelf. Start from one, or just tell your AI and it will ask what you'd like.
-
“I'm a UK sole trader who just registered for VAT. Help me add 20% VAT, my VAT number and my bank details so they show on every invoice.”
Start with this idea -
“Three clients pay me the same amount every month. Set up invoices that send themselves on the 1st of each month.”
Start with this idea -
“Make my invoices look like my brand: my logo at the top, dark green headings and my 'thank you' message at the bottom.”
Start with this idea -
“Every Monday, email me a list of unpaid and overdue invoices from InvoiceShelf with how many days late each one is.”
Start with this idea -
“When someone books a cleaning job through my website form, create a draft invoice for them in InvoiceShelf with the right price.”
Start with this idea -
“Change the purple in InvoiceShelf to my company's teal.”
Start with this idea
Can I trust it?
- AGPL-3.0-only. Free to use and change. If you run a changed version that other people use over the internet (for example customers opening the portal), you must offer them your source code under the same licence, for example with a link to your copy. Using it for your own business has no extra obligations.
- Your data: stores personal data, on your own device or server. SQLite file in the storage volume by default (or MySQL/MariaDB/PostgreSQL); PDFs, logos, receipts and custom PDF templates in storage/ or on an assigned file disk.
- Other services: Email (SMTP, Mailgun, Amazon SES or sendmail) (optional, free with most providers); S3, Dropbox or DigitalOcean Spaces (optional, pay-per-use); Gotenberg (optional, free (runs locally)); InvoiceShelf module marketplace (optional, free and paid modules)
- Pinned version
98acbe2. Every handover uses exactly this code, which we've reviewed. - Run 2.4.7 or later. Earlier Docker images shipped a PHP version with critical remote-code-execution flaws (CVE-2026-109618/109619).
- Customers open the portal and documents from the internet, so serve InvoiceShelf over HTTPS behind a reverse proxy and keep it updated.
- API tokens (issued per device by /api/v1/auth/login) don't expire by default and there is no screen to list them. Keep them private and call /api/v1/auth/logout to revoke one.
- Keep DOMPDF_ENABLE_REMOTE=false unless you trust every note and template that goes into a PDF.
- Keep APP_KEY, database passwords and the modules API token out of AI chats.
Did it work for people?
No reports yet
Be the first to tell others how it went.
